SJT: Public Task & GDPR Lawful Basis Essentials (passthemsra.com) - Free MSRA revision

This episode gives you a clear, exam-ready understanding of how UK GDPR actually works in clinical practice — especially the high-yield “dual legal anchor” every MSRA candidate must know. You’ll learn why Article 6 (public task) and Article 9 (health/social care) form the legal backbone for processing patient data, how to identify unlawful requests instantly, and how to challenge unsafe shortcuts while staying helpful and professional. A fast, practical guide to minimisation, security, opt-outs, DPIAs, breaches, and high-risk traps. 0:00 The unsafe request scenario00:22 Why instincts aren’t enough — you need law00:50 Special category data explained01:18 The dual legal anchor01:55 Article 6: Public task02:27 Article 9: Health and social care03:05 Why consent is not your GDPR basis03:40 When purposes shift (research, planning, public health)04:15 Minimisation principle04:50 Security principle — no Gmail/WhatsApp05:22 DSP Toolkit requirement05:55 National Data Opt-Out06:30 DPIA for high-risk projects07:00 Subject access requests (1-month rule)07:35 Data breaches: contain–assess–log08:05 The 72-hour ICO deadline08:40 Four major exam traps09:25 Stepwise plan for unsafe requests10:10 LAWFUL-9 mnemonic10:40 BASICS mnemonic11:20 Final takeaways & accountability• Article 6 + Article 9 = mandatory dual basis for all processing• Direct care → Public task + Health/social care• Clinical consent ≠ GDPR processing basis• Share only the minimum necessary, proportionate to purpose• Never use personal email or non-approved systems• National Data Opt-Out applies to secondary uses• Data breaches: 72-hour rule for ICO notification• Purpose first → then bases → then secure method → then documentLAWFUL-9 mnemonic:L – Lawful basis (Art 6)A – Article 9 conditionW – Written record of justificationF – Full transparencyU – Use minimum necessaryL – Log decisions9 – Article 9 + 72-hour breach ruleBASICS mnemonic:B – Basis (Art 6 + Art 9)A – Approved secure system onlyS – Security (DSP-compliant)I – Information rights & opt-outC – Cut down to minimumS – Store/retention rulesLinks:• passthemsra.com – Complete MSRA revision, notes, mocks, flashcards• freemsra.com – Free podcasts, threads and rapid-learning guides• msra.io – Smart MSRA Qbank with analytics#MSRA #SJT #MedicalRevision #UKDoctors #MedEd #passthemsra #freemsra #msraio #GDPR #PublicTask #InformationGovernance